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AMENDMENTS TO THE SPECIFICATION: 



Please replace the paragraph beginning on page 12, line 13, and ending on line 17 



with the following amended paragraph: 

In block 525, a refresh request is received. Refreshing involves changing 
keys after a certain duration. Refreshing, also referred to as re-keying, s e v e rs 
serves at least two purposes. First, for cryptographic reasons, it is a good idea to 
change keys from time to time. The longer a key is used, the more likely it is that 
someone will be able to crack the key and access the event without 
authorization. The more often keys are changed, the better the security. 



Please replace the paragraph beginning on page 13, line 6, and ending on line 13 

with the following amended paragraph: 

As illustrated in Figure 6, the event interval 630 is also the forward security 
window for the next event interval 630. That is, while the client is sending or 
receiving content using the current key during the current event interval, the 
client also accesses the key server during the forward security window to get the 
next refresh key. In alternate embodiments, the event interval and the forward 
security window do not exactly coincide. That is, the forward security window 
may be shorter or longer than the event interval, and the client may retrieve keys 
from the key server more than one event i nt e rna l interval in advance. 



Please replace the paragraph beginning on page 22, line 21, and ending on page 23, 

line 2 with the following amended paragraph: 

Where the security agent of Figures 12 and/or 13 is used in combination with 
the networking environment of Figure 1, the database of selector / security 
association pairs is populated by a client when the client acc e ss accesses key 
server 140 and receives keying information. 
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Please replace the paragraph beginning on page 24, line 17, and ending on page 25, 

line 2 with the following amended paragraph: 



In alternate embodiments, the present invention is implemented in discrete 
hardware or firmware. For example, one or more application specific integrated 
circuits (ASICs) could be programmed with the above described functions of the 
present invention. In another example, the present invention could be 
implemented in one or more ASICs on additional circuit boards and the circuit 
boards could be inserted into the computer(s) described above. In another 
example, tield programmable gate arrays (FPGAs) or static programmable gate 
arrays (SPGA) could be used to implement the present invention. In yet another 
example, a combination of of hardware and software could be used to implement 
the present invention. 



